Dell Powerstoreos vulnerabilities

CVE-2026-79687 Critical · 10.0 CWE-306 Sep 1, 2026

Missing Authentication for Critical Function in Dell Powerstoreos

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access.

CVE-2026-79682 High · 8.8 CWE-77 Sep 1, 2026

Command Injection in Dell Powerstoreos

Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

CVE-2026-58567 High · 8.8 CWE-78 Sep 1, 2026

OS Command Injection in Dell Powerstoreos

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

CVE-2026-79686 High · 8.8 CWE-693 Sep 1, 2026

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated…

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.

CVE-2026-79685 Medium · 6.5 CWE-88 Sep 1, 2026

Argument Injection in Dell Powerstoreos

Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access to sensitive sensitive system information.

CVE-2026-58569 High · 8.8 CWE-829 Sep 1, 2026

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere…

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges..

CVE-2026-79684 High · 8.8 CWE-693 Sep 1, 2026

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated…

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.

CVE-2026-58572 High · 8.8 CWE-94 Sep 1, 2026

Code Injection in Dell Powerstoreos

Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.

CVE-2026-58571 High · 8.8 CWE-78 Sep 1, 2026

OS Command Injection in Dell Powerstoreos

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

CVE-2026-79683 High · 8.8 CWE-693 Sep 1, 2026

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated…

Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attacker-controlled content to arbitrary filesystem paths.

CVE-2026-58575 High · 8.8 CWE-290 Sep 1, 2026

Authentication Bypass by Spoofing in Dell Powerstoreos

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator.

CVE-2026-76111 High · 8.8 CWE-863 Sep 1, 2026

Incorrect Authorization in Dell Powerstoreos

Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation.

CVE-2026-58574 Critical · 9.8 CWE-306 Aug 31, 2026

Missing Authentication for Critical Function in Dell Powerstoreos

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.

CVE-2026-28265 High · 7.1 CWE-22 Apr 1, 2026

Path Traversal in Dell Powerstoreos

PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.